Should Default User Settings include 'Warn' not 'Enable Max Heuristics'?

Yeah this program is now like so old it doesn't even see my OS as win7.'Cause back in 2008 that's all it knows. Bless.

Anyways I ran the test and scored 200 then I did it over and got 5% better score.

I changed one setting. This one - 'Warn' and not 'Enable max heuristics'.

So here's the point do I now permanently change my default security settings from 'Enable max heuristics' to 'Warn'?

Leaktest score says definitely Yes but as we live in a democracy of fonts I want you to tell me what's really better.

icon

Best answer by RetiredTripleHelix 3 October 2016, 19:00

If that setting above was working correctly it would make WSA very, very noisy to say the least. You would get so many Pop-Ups it would drive you crazy like an Anti-EXE app so no I would not recommend that setting as in most cases all your or anyone's files are not fully Whitelisted and depends if you use not so well known programs as it would take the Webroot Cloud longer to determine such programs Good without contacting support and asking them to Whitelist all your files on every update.

46 replies

Just to let you know that setting in WSA: "Warn when any new program executes that is not specfically whitelisted" is not working as it should and Webroot is aware of it and a fix will be out in the near future. Also note this does not reduce the protection of WSA in any way as it's just the setting that needs to be fixed.

If that setting above was working correctly it would make WSA very, very noisy to say the least. You would get so many Pop-Ups it would drive you crazy like an Anti-EXE app so no I would not recommend that setting as in most cases all your or anyone's files are not fully Whitelisted and depends if you use not so well known programs as it would take the Webroot Cloud longer to determine such programs Good without contacting support and asking them to Whitelist all your files on every update.

@ wrote:
Just to let you know that setting in WSA: "Warn when any new program executes that is not specfically whitelisted" is not working as it should and Webroot is aware of it and a fix will be out in the near future. Also note this does not reduce the protection of WSA in any way as it's just the setting that needs to be fixed.

@ wrote:@ wrote:
Just to let you know that setting in WSA: "Warn when any new program executes that is not specfically whitelisted" is not working as it should and Webroot is aware of it and a fix will be out in the near future. Also note this does not reduce the protection of WSA in any way as it's just the setting that needs to be fixed.

@ wrote:@ wrote:@ can you check with Lucas @ about this for a comment?

Thanks,

Daniel ;)Unfortunately, Lucas is not in the Office currently. I've forwarded this thread to our Manager of Product Support to check with his Team and/or the Product Team as well.The Product Team has informed me that this issue has been documented and we are actively tracking it. They also said there has been only one report thus far, meaning that it is by no means a high-priority-issue in the backlog.

JP wrote:
The Product Team has informed me that this issue has been documented and we are actively tracking it. They also said there has been only one report thus far, meaning that it is by no means a high-priority-issue in the backlog. Also trying to figure out if this affects all OS's or just Win10.
_________________________________________________________________

and by "this issue has been documented" & "only one report" .... means, "Warn when any new program executes [..]" ...button, does not "Warn"..?

@ wrote:bjm_ wrote: IDK, if "not specifically whitelisted" means, 'local or global' whitelist.ThanksWhitelisted means Global or the Webroot BrightCloud Database deems it's known and clean.Okay.
Thanks. I remain unsure regarding.
<< Issues a warning for any program not specifically included in the Webroot database of websites that are known to be okay. >>

< any program not specifically included in the Webroot database of websites >

@ wrote:@ wrote:bjm_ wrote: IDK, if "not specifically whitelisted" means, 'local or global' whitelist.ThanksWhitelisted means Global or the Webroot BrightCloud Database deems it's known and clean.Okay.
Thanks. I remain unsure regarding.
<< Issues a warning for any program not specifically included in the Webroot database of websites that are known to be okay. >>

< any program not specifically included in the Webroot database of websites >

program in the database of websites ?

I'm just talking about files that are known good in the Webroot Cloud Database not websites.

[g] Means Known Good so they are whitelisted!

[u] Means Unknown so they are not whitelisted yet or could be bad and Webroot will monitor [u] files just in case it needs to rollback when marked Bad or Good. When Good it will stop monitoring the said [u] files.

TripleHelix wrote: Whitelisted means Global or the Webroot BrightCloud Database deems it's known and clean.
_________________________________________________________
bjm_ wrote: Thanks. I remain unsure regarding.
<< Issues a warning for any program not specifically included in the Webroot database of websites that are known to be okay. >>

< any program not specifically included in the Webroot database of websites >

program in the database of websites ?___________________________________________________________________

TripleHelix wrote: I'm just talking about files that are known good in the Webroot Cloud Database not websites.
___________________________________________________________________
bjm_ wrote:

@ wrote:
TripleHelix wrote: Whitelisted means Global or the Webroot BrightCloud Database deems it's known and clean.
_________________________________________________________
bjm_ wrote: Thanks. I remain unsure regarding.
<< Issues a warning for any program not specifically included in the Webroot database of websites that are known to be okay. >>

< any program not specifically included in the Webroot database of websites >

program in the database of websites ?___________________________________________________________________

TripleHelix wrote: I'm just talking about files that are known good in the Webroot Cloud Database not websites.
___________________________________________________________________@ wrote:

"Warn when any" is silent. Yes, erpsvc is Monitor (or, I'll move to Allow). Webroot reports erpsvc as Unclassified.Well lets see what Webroot has to say during the week because if you go to a bad Website it will be blocked so I don't know why that's in there with Heuristics as that is for running process files on that system IMO. None of the other settings say anything about Websites and I run with Max Heuristics which is just fine.

Adjust heuristics using the information in the following table.
OPTIONDESCRIPTIONDisable heuristicsTurns off heuristic analysis. Not recommended.Enable standard heuristicsThis setting could lower your level of security.Enable enhanced heuristics based on the behavior, origin, age, and popularity of filesDefault; recommended setting.Enable maximum heuristicsUse with caution; this could cause unexpected behavior, prevent the use of lesser known applications, or prevent the installation of rarely-used programs.Warn when any new program executes that is not specifically whitelistedIssues a warning for any program not specifically included in the Webroot database of websites that are known to be okay.Enable Webroot InfraredFor details, see PC Shields Overview.

quote: << The extra information generated from these actions may result in a Good or Bad determination from the cloud based on cloud heuristics or a heuristic determination from WSA itself - in which case one of the above Good or Bad results occur.>>

quote: << The extra information generated from these actions may result in a Good or Bad determination from the cloud based on cloud heuristics or a heuristic determination from WSA itself - in which case one of the above Good or Bad results occur.>>

Cookie policy

Cookie settings

We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.